I gather from
<a href="http://www.postfix.org/postconf.5.html#smtp_tls_policy_maps" title="http://www.postfix.org/postconf.5.html#smtp_tls_policy_maps">http://www.postfix.org/postconf.5.html#smtp_tls_policy_maps</a> that the
match: directive really only has application to a policy of secure.

If I read right, it applies to the certificate validation.

I'm wondering if there is something similar but applies to MX hosts.

What I'm looking for:

When an MTA-STS policy has a mode of "testing" then certificate
validation should not be done because the RFC says to send it anyway
even if validation fails, so for those domains I want to use a policy of
'encrypt' instead of 'secure' but I also want the policy map to enforce

If I can find a USB key there is an updated kmod-wl src.rpm that *may*
bring up my wifi, but I am not sure I have access to a USB key at the
moment.

The motherboard is supermicro and the onboard nics are Intel which I
thought were well supported, but I do remember going from 7.2 to 7.3 on
a server IPv6 was bricked because of changes to how the /sbin/ifconfig
scripts were configure

This year, I am wanting to move to self-signed for SMTP and for
infrastructure domains that are not intended for the public where DANE
can validate. I am convinced DANE does a better job at validating a host
is who it says it is than CA certs do.

I just updated one of my mail servers to self-signed. The signed
certificate expires in few weeks so I can switch back if I did something
wrong.

Is there any blog that has information on a potential RHEL 8 release date?

boost in 7 is now too old for some things, in addition to gcc. There are
solutions in 7 to those issues but it's starting to feel like 6 felt
shortly before 7 came out, so I wonder if it is getting near to time.

I'm working on a major project bitcoin related and it would be
frustrating to deploy a bunch of CentOS 7 virtual machines only to have
8 come out fairly soon afterwards.

The following features of the C++11/C++14 standards are not supported by
g++:
* std::make_unique function (C++14)
* digit separators (C++14)
* binary literals (C++14)
* generic lambdas (C++14)
If you are using the GNU C compiler collection (gcc) then you need
at least v4.9.x.
configure: error: support for required C++11/C++14 features incomplete

Is there by chance a compat package for gcc 4.9.x available?

I didn't see it in a yum list.

I'm trying to build the latest mkvtoolnix and it looks like CentOS 7 gcc
is just barely too old :-/